$ rpki-client -vvf rpki.apnic.net/member_repository/A91AC73E/445545622C9511ECBEBC4248C4F9AE02/JD8tRHJ_HRuAefQBT2n0oHTR8eo.mft File: JD8tRHJ_HRuAefQBT2n0oHTR8eo.mft (raw, json) Hash identifier: 20NzbGRi9B1/RrDxir6jAikEpjnoAgihclY9f4MZcZA= Subject key identifier: D1:B6:B0:D2:A8:11:75:F3:26:B8:9E:5A:91:1F:AB:44:0B:C3:CE:F2 Authority key identifier: 24:3F:2D:44:72:7F:1D:1B:80:79:F4:01:4F:69:F4:A0:74:D1:F1:EA Certificate issuer: /CN=A91AC73E/serialNumber=243F2D44727F1D1B8079F4014F69F4A074D1F1EA Certificate serial: 04AE Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JD8tRHJ_HRuAefQBT2n0oHTR8eo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91AC73E/445545622C9511ECBEBC4248C4F9AE02/JD8tRHJ_HRuAefQBT2n0oHTR8eo.mft Manifest number: 04A7 Signing time: Thu 24 Apr 2025 23:42:29 +0000 Manifest this update: Thu 24 Apr 2025 23:42:28 +0000 Manifest next update: Thu 01 May 2025 23:42:28 +0000 Files and hashes: 1: JD8tRHJ_HRuAefQBT2n0oHTR8eo.crl (hash: 5regpxhmahKMz8E32rGzkkzQCiGo0rEM4k+dHD1Z9jo=) 2: 020CA7B24E4C11EC8045E71EC4F9AE02.roa (hash: tyZWDAn9bcgruEQUmKMpj2KMCjpkdyP72IeeYTIEOW8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91AC73E/445545622C9511ECBEBC4248C4F9AE02/JD8tRHJ_HRuAefQBT2n0oHTR8eo.crl rsync://rpki.apnic.net/member_repository/A91AC73E/445545622C9511ECBEBC4248C4F9AE02/JD8tRHJ_HRuAefQBT2n0oHTR8eo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JD8tRHJ_HRuAefQBT2n0oHTR8eo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 23:42:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1198 (0x4ae) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91AC73E, serialNumber=243F2D44727F1D1B8079F4014F69F4A074D1F1EA Validity Not Before: Apr 24 23:42:28 2025 GMT Not After : May 1 23:42:28 2025 GMT Subject: CN=680acc65-fa26 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:45:09:bc:f3:df:3a:61:33:b4:3f:71:86:ad: 94:7a:f4:e4:c8:d1:b9:39:25:5e:1f:9d:30:e0:3b: f1:a9:79:5d:e7:ff:fb:b3:75:fe:39:82:e4:21:0d: 7f:16:16:59:f4:45:8b:fd:f2:a2:7f:c2:06:97:3b: 56:89:34:09:45:41:e6:6e:df:79:79:27:55:84:81: bb:16:6c:d2:b3:0a:a2:a0:25:24:6a:6f:b8:32:af: f6:5a:32:c7:c6:0d:74:03:f3:7f:5f:12:87:cb:e5: 48:5d:64:d1:7b:62:16:fa:25:ac:4b:84:01:cf:ea: 49:04:28:f9:d6:a6:33:9b:0d:60:e7:a9:94:7f:32: 92:f0:e6:9d:6a:2e:77:7d:75:b5:63:33:52:21:c6: ac:e6:46:29:39:e5:80:31:4b:69:11:38:65:2f:3a: 3a:ff:b3:5e:ab:31:28:cd:6d:2b:ad:62:cb:3e:51: fc:a9:ad:ea:4e:e8:53:2f:38:3b:96:cc:d2:61:f7: 47:93:df:0e:43:dd:86:e1:00:e3:5f:3b:74:31:f8: bd:2f:f9:3f:a9:18:40:52:4a:38:39:82:3a:45:1e: a8:b3:4f:cd:d6:7a:90:73:dd:de:bc:f1:b9:3e:ca: 91:e1:a0:a8:79:d1:76:3e:b2:b9:4a:a2:5e:cc:06: c1:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D1:B6:B0:D2:A8:11:75:F3:26:B8:9E:5A:91:1F:AB:44:0B:C3:CE:F2 X509v3 Authority Key Identifier: keyid:24:3F:2D:44:72:7F:1D:1B:80:79:F4:01:4F:69:F4:A0:74:D1:F1:EA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91AC73E/445545622C9511ECBEBC4248C4F9AE02/JD8tRHJ_HRuAefQBT2n0oHTR8eo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JD8tRHJ_HRuAefQBT2n0oHTR8eo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AC73E/445545622C9511ECBEBC4248C4F9AE02/JD8tRHJ_HRuAefQBT2n0oHTR8eo.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8b:6b:60:13:87:0c:16:f4:0b:77:e6:5b:c7:b1:93:6d:8f:3e: ec:7b:53:2a:ad:df:18:b0:6a:19:3a:f1:78:74:5d:c7:e2:81: f0:39:a3:7f:69:10:61:34:42:84:d6:1e:94:c3:da:0b:2f:96: 1e:ee:93:c2:89:d0:e4:0a:89:cb:07:06:0c:5a:b2:1c:cf:e3: 79:32:ae:dc:6a:ad:39:e0:9f:d1:10:9f:a5:fc:3b:2d:f2:c5: 22:b4:89:90:11:3d:86:05:a3:73:44:06:04:83:53:e2:64:79: 16:26:fd:9b:21:d2:59:3f:fd:0f:0b:16:c8:46:7d:35:b2:a9: b2:58:1b:1b:f4:46:24:f3:69:ff:6d:27:2e:ed:f9:d6:71:26: 2b:65:1e:5e:58:93:0b:b5:6d:76:c3:d0:28:59:59:d9:65:bd: 97:2b:83:f6:57:41:b4:7c:6e:2f:3f:84:ab:58:bf:78:e5:d5: 36:91:4f:1a:8a:70:17:3c:1a:85:59:9e:d9:c7:75:a5:96:b3: e1:e7:a8:15:8f:5a:30:68:12:a6:07:1b:b5:73:cf:03:7a:fe: 9b:6e:f1:5a:77:71:b5:be:84:f6:0f:5d:18:52:ac:ad:87:3c: e1:f7:c5:0e:eb:1e:6a:d2:f1:9b:e2:5e:fc:b0:a4:2d:e0:c3: f0:0b:93:a9 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBK4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QUM3M0UxMTAvBgNVBAUTKDI0M0YyRDQ0NzI3RjFEMUI4MDc5RjQwMTRGNjlGNEEw NzREMUYxRUEwHhcNMjUwNDI0MjM0MjI4WhcNMjUwNTAxMjM0MjI4WjAYMRYwFAYD VQQDEw02ODBhY2M2NS1mYTI2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxUUJvPPfOmEztD9xhq2UevTkyNG5OSVeH50w4DvxqXld5//7s3X+OYLkIQ1/ FhZZ9EWL/fKif8IGlztWiTQJRUHmbt95eSdVhIG7FmzSswqioCUkam+4Mq/2WjLH xg10A/N/XxKHy+VIXWTRe2IW+iWsS4QBz+pJBCj51qYzmw1g56mUfzKS8Oadai53 fXW1YzNSIcas5kYpOeWAMUtpEThlLzo6/7NeqzEozW0rrWLLPlH8qa3qTuhTLzg7 lszSYfdHk98OQ92G4QDjXzt0Mfi9L/k/qRhAUko4OYI6RR6os0/N1nqQc93evPG5 PsqR4aCoedF2PrK5SqJezAbB4wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNG2sNKo EXXzJrieWpEfq0QLw87yMB8GA1UdIwQYMBaAFCQ/LURyfx0bgHn0AU9p9KB00fHq MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBQzczRS80NDU1NDU2MjJD OTUxMUVDQkVCQzQyNDhDNEY5QUUwMi9KRDh0UkhKX0hSdUFlZlFCVDJuMG9IVFI4 ZW8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0pEOHRSSEpfSFJ1QWVmUUJUMm4wb0hUUjhlby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB QzczRS80NDU1NDU2MjJDOTUxMUVDQkVCQzQyNDhDNEY5QUUwMi9KRDh0UkhKX0hS dUFlZlFCVDJuMG9IVFI4ZW8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCLa2AThwwW9At35lvHsZNtjz7se1Mqrd8YsGoZOvF4dF3H4oHwOaN/ aRBhNEKE1h6Uw9oLL5Ye7pPCidDkConLBwYMWrIcz+N5Mq7caq054J/REJ+l/Dst 8sUitImQET2GBaNzRAYEg1PiZHkWJv2bIdJZP/0PCxbIRn01sqmyWBsb9EYk82n/ bScu7fnWcSYrZR5eWJMLtW12w9AoWVnZZb2XK4P2V0G0fG4vP4SrWL945dU2kU8a inAXPBqFWZ7Zx3WllrPh56gVj1owaBKmBxu1c88Dev6bbvFad3G1voT2D10YUqyt hzzh98UO6x5q0vGb4l78sKQt4MPwC5Op -----END CERTIFICATE-----Generated at Sat Apr 26 05:18:47 2025 by rpki-client